medium4.3
CVE-2013-7188
Cross-site scripting (XSS) vulnerability in KBKP Software HostBill before 2013-12-14 allows remote attackers to inject arbitrary web script or HTML via unspeci…
Impact
Cross-site scripting (XSS) vulnerability in KBKP Software HostBill before 2013-12-14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hostbillapp | Hostbill | through 13-12-2013 Versions 02-08-2013, 04-11-2013, 4.7.0, 4.7.2, 4.7.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://extras.hostbillapp.com/security-advisory-hostbill-version-2013-12-14/
- http://hostbillapp.com/changelog
- http://osvdb.org/101030
- http://secunia.com/advisories/56124
- https://blog.rack911.com/security-advisories/hostbill-xss-admin-hijack-security-vulnerability-r911-0099
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89750
- http://extras.hostbillapp.com/security-advisory-hostbill-version-2013-12-14/
- http://hostbillapp.com/changelog
- http://osvdb.org/101030
- http://secunia.com/advisories/56124
- https://blog.rack911.com/security-advisories/hostbill-xss-admin-hijack-security-vulnerability-r911-0099
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89750